Caddy needs this only for DNS-01 cert renewal via Vultr's API, which happens within the final 30 days of the cert's 90-day lifetime -- roughly once a quarter. Requiring it to be exported on every `docker compose up` was friction for routine ops (CoreDNS recreations during unrelated config changes). Empty default keeps the stack startable without the key in scope. When renewal is imminent, set the var properly OR (preferred long-term) migrate Caddy to caddy-dns/rfc2136 pointing at our own plugin and retire the Vultr dependency entirely.
Description
Hidden-primary DNS for ~91 zones: CoreDNS + custom rfc2136 plugin for self-hosted ACME DNS-01. Source of truth for zones/, Corefile, deploy configs.
Languages
Shell
49.7%
Makefile
21.5%
Python
16.6%
Dockerfile
12.2%